CVEvulnerability
CVE-2006-4315
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under "Program Files" or its subdirectories.
Affected configurations
• ssh tectia client 4.0
• ssh tectia client 4.0.1
• ssh tectia client 4.0.3
• ssh tectia client 4.0.4
• ssh tectia client 4.0.5
• ssh tectia client 4.2
• ssh tectia client 4.2.1
• ssh tectia client 4.3
• ssh tectia client 4.3.1
• ssh tectia client 4.3.1j
• ssh tectia client 4.3.2
• ssh tectia client 4.3.3
• ssh tectia client 4.3.4
• ssh tectia client 4.3.5
• ssh tectia client 4.3.6
• ssh tectia client 4.3.7
• ssh tectia client 4.3.8k
• ssh tectia client 4.4
• ssh tectia client 4.4.1
• ssh tectia client 4.4.2
• ssh tectia client 4.4.3
• ssh tectia client 4.4.4
• ssh tectia client 4.4.5
• ssh tectia client 5.0
• ssh tectia client 5.0.1
• ssh tectia connector 5.0
• ssh tectia connector 5.0.1
• ssh tectia manager 1.3
• ssh tectia manager 1.4
• ssh tectia manager 2.1.2
• ssh tectia server 4.0
• ssh tectia server 4.0.3
• ssh tectia server 4.0.4
• ssh tectia server 4.0.5
• ssh tectia server 4.2.1
• ssh tectia server 4.3
• ssh tectia server 4.3.1
• ssh tectia server 4.3.2
• ssh tectia server 4.3.3
• ssh tectia server 4.3.4
• ssh tectia server 4.3.5
• ssh tectia server 4.3.6
• ssh tectia server 4.3.7
• ssh tectia server 4.4
• ssh tectia server 4.4.2
• ssh tectia server 4.4.3
• ssh tectia server 4.4.4
• ssh tectia server 4.4.5
• ssh tectia server 5.0
• ssh tectia server 5.0.1
References
- http://securitytracker.com/id?1016743 securitytracker.com
- http://www.securityfocus.com/bid/19679 www.securityfocus.com
- http://www.ssh.com/company/news/2006/english/security/article/775/ Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28566 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1016743 securitytracker.com
- http://www.securityfocus.com/bid/19679 www.securityfocus.com
- http://www.ssh.com/company/news/2006/english/security/article/775/ Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28566 exchange.xforce.ibmcloud.com